, 2004-02-20
If hundreds of thousands of people are still blindly clicking on attachments in their email, is there any hope of mitigating the threat of hundreds of thousands of compromised systems with open backdoors?
Expand all |
Post comment
Knock, Knock, Knock
2004-02-20
Anonymous (2 replies)
Anonymous (2 replies)
It stopped a lot of buffer over run type attacks and stopped those stupid mass emailing and the like.
The shimmy to the App returned true to all suspicious calls, eg msvcrt.dll command shell, etc. For some shell calls I gave it bogus address and such, eg get hostname, address box was invalid email addresses, etc.
It also run executable under a user with less access than guest.
So to help stop this stupidity, a shimmy, sandbox runtime is really helpful.
cheers,
Mr Potato
[ reply ]
Link to this comment: http://www.securityfocus.com/comments/columns/221/25205#25205